Re: [hlcoders] non HL question

2005-05-25 Thread Jeff Fearn
On 5/25/05, r00t 3:16 [EMAIL PROTECTED] wrote:
 lol,

 He asked how to change the username not the password...
 If he meant the password then as root
 type passwd on the command without the quotes.

bwahahahahahah that's so funny, my mind couldn't cope and made me read
password lol

hehe

snigger

funniest thing I've re-read in ages :)

giggle

Jeff

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders



RE: [hlcoders] non HL question

2005-05-25 Thread Deadman Standing
Actually it is an excellent (and recommended) security step. It is a lot
harder to brute force a password if you don't know the user name.

General security steps:

Unix: Prevent root from remote login. Only allow local login for root.

Windows: Use the password manager to change the 'Administrator' user to
another name.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jeff Fearn
Sent: Wednesday, May 25, 2005 2:51 AM
To: hlcoders@list.valvesoftware.com
Subject: Re: [hlcoders] non HL question

On 5/25/05, r00t 3:16 [EMAIL PROTECTED] wrote:
 lol,

 He asked how to change the username not the password...
 If he meant the password then as root
 type passwd on the command without the quotes.

bwahahahahahah that's so funny, my mind couldn't cope and made me read
password lol

hehe

snigger

funniest thing I've re-read in ages :)

giggle

Jeff

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders



Re: [hlcoders] non HL question

2005-05-25 Thread tei

Andreas Kang wrote:

Hello, I'm a newb and i was just woundring howto change the root username?

 In that way make the server more secure.. :)
 and im sure that you guys know that :)

Thats not a good idea.

You may use your box shell trough ssh, then copy/download files with
rsync trough ssh.  scp and sftp can be also good tools.

If you are paranoid enough, never use root, send root commands trough sudo.

You can also disable by default demons you dont need. And update the
system often (apt-get, urpmi, yum, portage, etc.. )

Of course, use a password easy to remenber, with numbers,etc, but
imposible to guess by brute force.

The art of good passwords!.. TEHA0GP
No more lemmings left!...  NMLL0ZERO
Blue screen of death   BLUEY0RICKBLUE
Lyiing on Laugh...   L0LAUGH
I am not a lawyer..!1ANA1
Valve, I am gratefull...  V1AGRA

etc..

Final suggestion, safety rules are like The fight club rules:
  NEVER show your real safety rules publically. Thats dumb.

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders



[hlcoders] non HL question

2005-05-24 Thread Andreas Kang
Hello, I'm a newb and i was just woundring howto change the root username? In 
that way make the server more secure.. :) and im sure that you guys know that :)

Med vennlig hilsen:
Andreas Kang Schøyen
Teknisk ansvarlig for NovaNett avd. CS
e-post: [EMAIL PROTECTED]
mobil: 45 44 21 88


-Opprinnelig melding-
Fra: Jeffrey botman Broome [mailto:[EMAIL PROTECTED]
Sendt: Tuesday, May 24, 2005 11:10 PM
Til: hlcoders@list.valvesoftware.com
Emne: Re: [hlcoders] SZ_GetSpace error - HL1

Jeff Fearn wrote:
 On 5/23/05, Deadman Standing [EMAIL PROTECTED] wrote:

Adding -zone 8192 to the command line can sometimes help this. From looking
at the Quake code it appears the SZ_GetSpace error occurs when the engine
overruns static buffers used to build network messages. Too many or poorly
written plugins can aggravate the situation.


 I'll try that.

 What exactly makes a plugin badly written? I have a bot plugin based
 on HPB bot that might be at fault, but no idea what to target to fix
 it.

The HPB bot can generate the SZ_GetSpace crash when displaying lots of
waypoints (if you are editing waypoints on the client).  The waypoint
display method sends a reliable network message for each waypoint line
drawn.  If enough of these reliable messages are sent in too short a
time period, the buffer overflows.

One of the Counter-Strike bot authors (I don't remember which one)
changed this to use an un-reliable message for displaying these lines
which helps prevent the overflow.  In the worst case, sometimes a
waypoint line wouldn't get drawn and then would appear the next time it
was updated.

The SZ_GetSpace crashing problem also occurred if some plugin attempts
to send a network message to a fake client (bot).  The HPB bot code
tries to prevent this, but there can still be cases of other pluggins
running (if you are using metamod, which it sounds like you are not)
that send a network message to all players that could cause this problem.

--
Jeffrey botman Broome

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders


--
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.322 / Virus Database: 266.11.15 - Release Date: 5/22/2005


--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.322 / Virus Database: 266.11.15 - Release Date: 5/22/2005


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders



Re: [hlcoders] non HL question

2005-05-24 Thread r00t 3:16

uh, That isn't advised
You will probably screw up your box if you do that.

There are alot of better ways to secure the box then to just change the root
login.


r00t 3:16
CQC Gaming
www.cqc-gaming.com
- Original Message -
From: Andreas Kang [EMAIL PROTECTED]
To: hlcoders@list.valvesoftware.com
Sent: Tuesday, May 24, 2005 7:17 PM
Subject: [hlcoders] non HL question


Hello, I'm a newb and i was just woundring howto change the root username?
In that way make the server more secure.. :) and im sure that you guys know
that :)

Med vennlig hilsen:
Andreas Kang Schøyen
Teknisk ansvarlig for NovaNett avd. CS
e-post: [EMAIL PROTECTED]
mobil: 45 44 21 88


-Opprinnelig melding-
Fra: Jeffrey botman Broome [mailto:[EMAIL PROTECTED]
Sendt: Tuesday, May 24, 2005 11:10 PM
Til: hlcoders@list.valvesoftware.com
Emne: Re: [hlcoders] SZ_GetSpace error - HL1

Jeff Fearn wrote:

On 5/23/05, Deadman Standing [EMAIL PROTECTED] wrote:


Adding -zone 8192 to the command line can sometimes help this. From
looking
at the Quake code it appears the SZ_GetSpace error occurs when the engine
overruns static buffers used to build network messages. Too many or poorly
written plugins can aggravate the situation.



I'll try that.

What exactly makes a plugin badly written? I have a bot plugin based
on HPB bot that might be at fault, but no idea what to target to fix
it.


The HPB bot can generate the SZ_GetSpace crash when displaying lots of
waypoints (if you are editing waypoints on the client).  The waypoint
display method sends a reliable network message for each waypoint line
drawn.  If enough of these reliable messages are sent in too short a
time period, the buffer overflows.

One of the Counter-Strike bot authors (I don't remember which one)
changed this to use an un-reliable message for displaying these lines
which helps prevent the overflow.  In the worst case, sometimes a
waypoint line wouldn't get drawn and then would appear the next time it
was updated.

The SZ_GetSpace crashing problem also occurred if some plugin attempts
to send a network message to a fake client (bot).  The HPB bot code
tries to prevent this, but there can still be cases of other pluggins
running (if you are using metamod, which it sounds like you are not)
that send a network message to all players that could cause this problem.

--
Jeffrey botman Broome

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders


--
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.322 / Virus Database: 266.11.15 - Release Date: 5/22/2005


--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.322 / Virus Database: 266.11.15 - Release Date: 5/22/2005


___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders




___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders



Re: [hlcoders] non HL question

2005-05-24 Thread Jeff Fearn
On 5/24/05, r00t 3:16 [EMAIL PROTECTED] wrote:
 uh, That isn't advised
 You will probably screw up your box if you do that.

It won't break anything.

 There are alot of better ways to secure the box then to just change the root
 login.

True, but it's a good first step.


 r00t 3:16
 CQC Gaming
 www.cqc-gaming.com
 - Original Message -
 From: Andreas Kang [EMAIL PROTECTED]
 To: hlcoders@list.valvesoftware.com
 Sent: Tuesday, May 24, 2005 7:17 PM
 Subject: [hlcoders] non HL question


 Hello, I'm a newb and i was just woundring howto change the root username_
?
 In that way make the server more secure.. :) and im sure that you guys know
 that :)

man passwd

Jeff

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders



Re: [hlcoders] non HL question

2005-05-24 Thread r00t 3:16

If he is worried about someone cracking his password use a better password.

Changing the root login for security isn't doing much.
Most exploits, exploit the UID 0 and GID 0 so changing root to something
else will not.

Firewall the box using iptables, disable shell access except from trusted IP
addresses.
If you need people to have shell accounts. Disable root login via shell. Are
probably the better solutions..

Changing the root password will help only if someone is trying to crack the
password using brute force.
More times then not if they are trying to guess the root password the know
they system already and probably cat /etc/passwd so they know what the root
login
would of been changed to already. eg web server?
?php system(cat /etc/passwd); ?

Take away the ability of them trying to even be able to login as root would
be a better solution.


r00t 3:16
CQC Gaming
www.cqc-gaming.com
- Original Message -
From: Jeff Fearn [EMAIL PROTECTED]
To: hlcoders@list.valvesoftware.com
Sent: Tuesday, May 24, 2005 8:40 PM
Subject: Re: [hlcoders] non HL question



On 5/24/05, r00t 3:16 [EMAIL PROTECTED] wrote:

uh, That isn't advised
You will probably screw up your box if you do that.


It won't break anything.


There are alot of better ways to secure the box then to just change the
root
login.


True, but it's a good first step.



r00t 3:16
CQC Gaming
www.cqc-gaming.com
- Original Message -
From: Andreas Kang [EMAIL PROTECTED]
To: hlcoders@list.valvesoftware.com
Sent: Tuesday, May 24, 2005 7:17 PM
Subject: [hlcoders] non HL question


Hello, I'm a newb and i was just woundring howto change the root
username_

?

In that way make the server more secure.. :) and im sure that you guys
know
that :)


man passwd

Jeff

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders






___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders



Re: [hlcoders] non HL question

2005-05-24 Thread Jeff Fearn
On 5/24/05, r00t 3:16 [EMAIL PROTECTED] wrote:
 If he is worried about someone cracking his password use a better password.

Which is exactly what he asked how to do.

--snip--

Jeff

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders



RE: [hlcoders] non HL question

2005-05-24 Thread Tony \omega\ Sergi
Quote--
Hello, I'm a newb and i was just woundring howto change the root username?
In that way make the server more secure.. :) and im sure that you guys know
that :)
--Quote

-Original Message-
From: Jeff Fearn [mailto:[EMAIL PROTECTED]
Sent: May 24, 2005 10:35 PM
To: hlcoders@list.valvesoftware.com
Subject: Re: [hlcoders] non HL question

On 5/24/05, r00t 3:16 [EMAIL PROTECTED] wrote:
 If he is worried about someone cracking his password use a better
password.

Which is exactly what he asked how to do.

--snip--

Jeff

--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.11.15 - Release Date: 22/05/2005



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders



Re: [hlcoders] non HL question

2005-05-24 Thread r00t 3:16

lol,

He asked how to change the username not the password...
If he meant the password then as root
type passwd on the command without the quotes.


r00t 3:16
CQC Gaming
www.cqc-gaming.com


- Original Message -
From: Tony omega Sergi [EMAIL PROTECTED]
To: hlcoders@list.valvesoftware.com
Sent: Tuesday, May 24, 2005 11:06 PM
Subject: RE: [hlcoders] non HL question



Quote--
Hello, I'm a newb and i was just woundring howto change the root username?
In that way make the server more secure.. :) and im sure that you guys
know
that :)
--Quote

-Original Message-
From: Jeff Fearn [mailto:[EMAIL PROTECTED]
Sent: May 24, 2005 10:35 PM
To: hlcoders@list.valvesoftware.com
Subject: Re: [hlcoders] non HL question

On 5/24/05, r00t 3:16 [EMAIL PROTECTED] wrote:

If he is worried about someone cracking his password use a better

password.

Which is exactly what he asked how to do.

--snip--

Jeff

--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.11.15 - Release Date: 22/05/2005



___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders






___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders